
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/68EAE318D09411EA9D19403FC4F9AE02.roa
File: 68EAE318D09411EA9D19403FC4F9AE02.roa (raw, json)
Hash identifier: rz8LrIA43yakeNhyNk7wKkxNwEkzYFtk89YFdVyzLwQ=
Subject key identifier: 50:CE:53:E7:AD:06:ED:CA:B1:DF:77:9E:2B:E7:7A:68:F0:BA:39:2E
Certificate issuer: /CN=A91CCDD3/serialNumber=C2E0B583DA40DB6DD833051C0524599E1A5902C6
Certificate serial: 0932
Authority key identifier: C2:E0:B5:83:DA:40:DB:6D:D8:33:05:1C:05:24:59:9E:1A:59:02:C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/68EAE318D09411EA9D19403FC4F9AE02.roa
Signing time: Sun 28 Jun 2026 21:25:04 +0000
ROA not before: Sun 28 Jun 2026 21:25:03 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 140947
IP address blocks: 103.153.182.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.crl
rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2354 (0x932)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCDD3, serialNumber=C2E0B583DA40DB6DD833051C0524599E1A5902C6
Validity
Not Before: Jun 28 21:25:03 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6a41912f-25ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:95:f1:52:c0:90:ab:90:ff:61:e5:f4:6d:9a:
63:f0:9b:88:12:8e:51:a0:67:65:1f:75:59:19:97:
ff:1d:a9:3d:db:3d:ef:c1:58:88:33:c8:b4:8f:a7:
7e:28:1d:7a:91:4e:ac:6a:e2:be:18:e0:1c:76:a6:
67:7e:30:6b:17:03:14:d1:78:1f:39:a7:2f:db:36:
73:4a:b4:2c:18:e7:02:79:6a:bf:cc:0a:d4:de:d1:
02:eb:d1:0d:9d:ae:53:23:48:08:10:73:b2:61:1e:
d7:b2:ee:85:4a:c7:4c:e6:da:be:db:16:71:73:c6:
a6:e4:3a:53:32:2f:fa:c0:56:5e:2b:28:0a:81:32:
17:74:2c:d2:39:7c:74:4f:62:27:3c:f3:34:80:b4:
65:82:6a:b1:21:cf:8c:20:60:d4:2d:2b:86:35:b1:
3b:38:e6:bd:4f:8e:94:5d:d3:44:05:d2:9e:16:de:
07:f6:fe:21:1a:e2:ba:9a:87:8d:15:33:35:85:28:
f7:19:84:ce:7b:d4:c6:3b:e2:fd:b9:70:08:3d:61:
13:14:97:7d:79:47:59:13:fc:16:0b:7b:33:92:c0:
e9:b2:a6:ec:f2:4c:2e:c7:1f:11:77:ff:71:c1:ba:
d1:94:88:dd:bc:29:d9:c5:4a:10:de:76:9a:c8:d5:
4e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:CE:53:E7:AD:06:ED:CA:B1:DF:77:9E:2B:E7:7A:68:F0:BA:39:2E
X509v3 Authority Key Identifier:
keyid:C2:E0:B5:83:DA:40:DB:6D:D8:33:05:1C:05:24:59:9E:1A:59:02:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/68EAE318D09411EA9D19403FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.153.182.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:fa:3d:1f:6d:93:e4:a2:33:db:cc:aa:48:37:74:66:ff:60:
97:57:46:dc:83:f7:91:79:4e:5f:c3:f0:df:0c:2a:9f:17:9c:
77:be:fe:78:13:b8:26:f4:09:69:45:91:40:30:09:f4:41:c3:
25:a5:3d:c2:2b:f7:09:46:3e:f4:3b:fd:da:b1:d0:36:db:4c:
8e:52:ba:2b:16:22:7b:32:cb:36:b7:82:44:93:f7:ec:2d:4b:
b2:46:8d:4e:c0:c3:61:f1:72:0a:cf:60:e1:53:13:84:be:ec:
d5:cf:dd:53:f6:ac:66:9c:50:70:f9:29:5b:b5:26:e6:ff:f5:
c6:be:4b:2a:78:31:5e:0a:00:2a:24:bf:7b:33:ef:53:7f:b5:
ee:97:c5:4c:58:dc:1e:ba:21:52:cf:84:ee:63:0a:c9:b7:6e:
e9:95:f2:e1:54:0a:cd:0b:ac:e1:6d:f5:35:b5:ed:99:74:2a:
b3:fd:bb:0d:67:99:6d:ac:be:4b:56:e1:33:ff:43:6b:cd:0d:
24:71:52:b0:42:d1:9e:f3:73:22:76:fd:8d:53:7a:50:d6:a3:
9f:9b:2f:6f:17:85:71:2d:8f:0c:82:8e:11:7d:fd:b0:5a:9d:
9d:e7:b9:63:a4:e2:bc:79:38:cc:f8:4c:3f:26:4a:00:48:5e:
6b:28:0c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 19:36:23 2026 by rpki-client